Behavioral task
behavioral1
Sample
eae595f57d37e3c0f56dad67af537698_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
eae595f57d37e3c0f56dad67af537698_JaffaCakes118
-
Size
496KB
-
MD5
eae595f57d37e3c0f56dad67af537698
-
SHA1
2da7fbae16b11c9f2c113bb7e47037ac4fdff124
-
SHA256
96d864cae927c222e5e0cbf15f1a38ef25b4ccfaa5d93519004a8a2a7e1216e7
-
SHA512
e5fd1d75b048cf3034cf5a4026de43b93e4e37cc524e67c59241a837c1abeaa8742cfd008c73deaae11b479902a24fa27ffe731ddb0bec19e8e7e82600649cc2
-
SSDEEP
12288:UX1+8UU6WpBj/6ymbxSyzly8d62Qg768EfJYRVQUL0bs:Q+8UU6Wpl/6ySx1Ry8P9RlL0
Malware Config
Signatures
-
resource yara_rule sample themida -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource eae595f57d37e3c0f56dad67af537698_JaffaCakes118
Files
-
eae595f57d37e3c0f56dad67af537698_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 29KB - Virtual size: 76KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 436B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Themida Size: 462KB - Virtual size: 1.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE